Platform Support

Platforms supported by Enterprise data loss prevention (DLP).
Enterprise data loss prevention (DLP) is supported on the following platforms. Enterprise DLP data patterns and data filtering profiles are designed to work across all supported platforms to provide consistent data security across all locations.
All PA-Series firewalls and VM-Series firewalls (but not CN-Series firewalls).
  • Requires PAN-OS 10.0.2 or a later version.
  • Requires an M-Series or Panorama virtual appliance running PAN-OS 10.0.2 or later version.
    Enterprise DLP supports adding a data filtering profile to a Security policy rule or security profile group configured on Panorama only. To successfully leverage Enterprise DLP, you must configure your Security policy rule and security profile group on Panorama and push these configurations to your managed firewalls.
    Enterprise DLP does not support pushing an Enterprise DLP data filtering profile to your managed firewall and referencing the data filtering profile in a Security policy rule or security profile group created locally on the firewall.
  • Requires minimum Application and Threats content release version 8334 or a later version.
    Upgrade to PAN-OS 10.0.3 and install Application and Threats content release 8413 or later version for additional application support.
Prisma Access (Panorama Managed)
  • Requires Prisma Access 2.0 Innovation or a later version.
  • Requires an M-Series or Panorama virtual appliance running PAN-OS 10.0.2 or later version.
  • Requires minimum Application and Threats content release 8334 or a later version.
    Install Application and Threats content release 8413 or later version for additional application support.
  • DLP is an add-on license on Prisma Access (Panorama Managed). You can either start with a 60-day trial or you can purchase a license to use Enterprise DLP on Prisma Access (Panorama Managed).
Cloud Management
  • Enterprise DLP is supported on Cloud Management when leveraging Prisma Access (Cloud Managed), SaaS Security, or both.
  • DLP is an add-on license on Cloud Management when leveraging Cloud Management from a Single Prisma SASE Platform or Multitenant Prisma SASE Platform.
    Enterprise DLP is included by default and does not require a separate license when leveraging Cloud management from the CASB-X Platform.
  • Important:
    Install Panorama plugin for Enterprise DLP 1.0.6 or later release if you are leveraging Enterprise DLP on Cloud Management and managing the Enterprise DLP configuration from Panorama for NextGen firewalls and Prisma Access (Panorama Managed). This is required to ensure Enterprise DLP configurations are successfully synchronized across all your security platforms.
    DLP policy enforcement on Cloud Management is supported when using Panorama to manage your Enterprise DLP configuration.

Recommended For You